|Short Description||Adware is usually designed to assist users while shopping online.|
|Symptoms||Many advertisements are generated.|
|Distribution Method||Via freeware packages (bundling), or from legitimate freeware download websites|
|Detection tool||Download SpyHunter, to See If Your System Has Been Affected By Lucuma Adware|
Lucuma is an Israeli company, a well-known publisher of ad-supported software. The products developed by Lucuma tend to drop many .dll and .exe files onto the system, associated with browser add-ons and toolbars. Even though such software pieces, often regarded as potentially unwanted (PUPs or PUAs), are not classified as malicious, they may cause privacy-related and PC performance issues.
One way to tell that your system has been affected by a PUP is the sudden display of advertisements, related to your browsing history and search queries. Annoying browser redirects and suspicious Java/ Adobe updates presented as pop-ups are other ‘side effects’ brought by the ever-expanding ad-supported software family.
Antivirus scans and anti-malware products detect files generated by Lucuma and mark them as PUP, riskware and/or adware. In some cases, however, the particular AV program may discover a Trojan component. Because many of those third party products collect information, they may also be defined as spyware. In that sense, it is not surprising that an AV tool will detect it as a Trojan. Spyware is mostly represented by adware, Trojans, and tracking technologies.
What is joeann.dll?
As you might have guessed, joeann.dll is a module developed by Lucuma and detected by multiple AV solutions as adware.
One of the detection names of joeann.dll is:
What is chase64.dll?
The publisher of chase64.dll is, once again, Lucuma. А detailed analysis by herdProtect clearly shows that the .dll file is connected to Shopperz adware.
- Kaspersky detects it as not-a-virus:WebToolbar.Win32.Agent.
- ESET NOD32 detects it as Win64/Toolbar.Perion.B potentially unwanted (variant).
- F-Secure detects it as Adware.Shopperz.A.
Adware Publishers and the Bundling Method
Curiously enough, BitCocktail is another infamous adware publisher that describes adware products as ‘fun consumer applications’.
What one can easily assume is that BitCocktail and Lucuma cooperate, or at least share the same advertising platforms. What is also common between such adware publishers is the method they usually employ to spread their software. As we have written many, many times, the technique is called bundling. In terms of potentially unwanted applications, software bundling is quite the little, sneaky devil. When the user downloads a free program, let’s say a PDF converter, and skips the Custom download option, he may download an ‘extra’ application.
This is what is usually written in the EULA (End User License Agreement) of a PUP:
→The developer of the software (“Software”) you are installing has chosen to use “X” to provide recommendations for other third-party software.
As ridiculous it may sound, once the software is installed, and certain non-identifiable details are obtained (OS system, preferred browser, etc), the Publisher may choose what third-party products are appropriate for the individual user.
Results of Third-Party Software Infiltration and Bundling
As it turns out, third party products may sneak into in the system in a stealthy manner. Moreover, third party software may be pushed into the system after the primary Publisher has gathered and analyzed whatever information they needed in the first place.
Anyhow, once the installation is complete, the user may be exposed to:
- Persistent advertising campaigns.
- Browser redirects to predefined websites.
- Data collection (personally identifiable and non-personally identifiable information).
- Modifications of the System Registry. Certain files may be added or deleted.
Remove Adware by Lucuma and Similar Publishers
In conclusion, adware applications push many .dll and .exe files into the system. Their prolonged residence may bring about various security issues. According to many malware researchers, adware and PUPs increase the system’s vulnerability to harmful cyber threats. An ad-supported program that seems harmless at first may later turn out to be associated with a virus or a Trojan. Malware is often spread via ‘chain reactions’ – and it often relies on user interaction. Always be extra cautious and research your software.
If your system has been affected by Lucuma, and joeann.dll, chase64.dll, and similar files have been detected, you should remove it via AV software. If you currently don’t have an active AV program, you may want to proceed towards installing one and scanning your system. Even though you may succeed in manually removing the adware, more riskware programs may be still residing in the background.
Spy Hunter scanner will only detect the threat. If you want the threat to be automatically removed, you need to purchase the full version of the anti-malware tool.Find Out More About SpyHunter Anti-Malware Tool / How to Uninstall SpyHunter